java-11-openjdk/rh1648249-add_commented_out_nss_cfg_provider_to_java_security.patch
Andrew Hughes 409bcec3d8 Rebase FIPS patches from fips branch and simplify by using a single patch from that repository
* RH2036462: sun.security.pkcs11.wrapper.PKCS11.getInstance breakage
* RH2090378: Revert to disabling system security properties and FIPS mode support together

Rebase RH1648249 nss.cfg patch so it applies after the FIPS patch
Enable system security properties in the RPM (now disabled by default in the FIPS repo)
Improve security properties test to check both enabled and disabled behaviour
Run security properties test with property debugging on

Resolves: rhbz#2099839
Resolves: rhbz#2100676
2022-07-08 17:21:37 +01:00

13 lines
494 B
Diff

diff --git a/src/java.base/share/conf/security/java.security b/src/java.base/share/conf/security/java.security
index 474fe6f401f..7e94ae32023 100644
--- a/src/java.base/share/conf/security/java.security
+++ b/src/java.base/share/conf/security/java.security
@@ -84,6 +84,7 @@ security.provider.tbd=Apple
#ifndef solaris
security.provider.tbd=SunPKCS11
#endif
+#security.provider.tbd=SunPKCS11 ${java.home}/lib/security/nss.cfg
#
# Security providers used when FIPS mode support is active